Back to results
US 9,806,885 B1Granted
Dual use cryptographic system and method
AssigneeRockwell Collins, Inc.
InventorsJoshua P. Breitbach, Mark R. Wagner, Adriane Rae Van Auken, Jerome L. Schmidt, Kevin M. Bayer
Life of this patent
Estimating the term…
Abstract
Cryptographic communication systems and methods can utilize a base interface and a channel interface. Plug-ins can be utilized to provide cryptographic functions configured for either a first customer or a second customer. The first customer can be a United States domestic customer and the second customer can be an international customer.
Claims17
A cryptographic product, comprising:
- a base comprising a base general purpose hardware processor configured to execute base software;
- and
- at least one channel comprising a channel general purpose hardware processor configured to execute channel software, wherein the base software and the channel software each comprise an abstract layer providing a common interface for operating system functions, a common layer operating above the abstract layer, and one of a first software plug-in for a first customer or a second software plug-in for a second customer, wherein the common layer provides code necessary to execute the first software plug-in or the second software plug-in, wherein the base provides communication management between a host and the cryptographic product and the channel provides encryption/decryption of data between a red side of the channel and a block black side of the channel, the channel including a first interface in communication with red data on the red side of the channel and a second interface in communication with black data on the black side of the channel;
- a third interface configured to connect the base to the at least one channel, wherein the third interface is physically separated from the host;
- a core field programmable array;
- and a channel field programmable array, wherein the common layer includes elements executed on the core field programmable array, wherein the core field programmable array provides accelerator functions for the channel.
3 more elements
A method of communicating cryptographic data, the method comprising:
- executing an abstract layer on a base general purpose hardware processor and a channel general purpose hardware processor to provide a common interface for operating system functions;
- executing a common layer above the abstract layer to translate between the operating system functions and plug-in level functions;
- providing, by the common layer, code necessary to execute a first software plug-in configured for a first customer or a second software plug-in configured for a second customer;
- providing, by the base general purpose hardware processor, communication management between a host and a cryptographic product;
- providing, by the channel general purpose hardware processor, encryption/decryption of data between a red side of a channel and a black side of a channel, the channel including a first interface in communication with red data on the red side of the channel and a second interface in communication with black data on the black side of the channel;
- and
- executing at least one plug-in configured for a first customer or a second customer, the plug-in separated from the abstract layer and the common layer by a virtual address space model, wherein the plug-ins are executed using field programmable gate arrays as accelerators.
4 more elements
A communication system, comprising:
- a base interface configured to execute an operating system, the base interface configured to provide communication management between a host and a cryptographic product;
- and
- a channel interface configured to encrypt and decrypt data in response to plug-in execution, the base interface connected to the channel interface by a third interface physically separated from the host, the base interface and channel interface each comprising an abstract layer providing a common interface for operating system functions and a common layer operating above the abstract layer, the channel interface comprising a field programmable gate array including an accelerator loaded using a partial reconfiguration mechanism, the field programmable gate array configured to provide accelerator functions for the channel interface, the plug-in configured to execute a bi-direction traffic cryptographic equipment application to logically separate a red side of the channel interface and a black side of the channel interface, the plug-in being one of a first software plug-in for a first customer or a second software plug-in for a second customer.
Dependencies are inferred from the claim text.